EUVD-2026-99340

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-99079

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

CVE-2026-105732

A stack-based buffer overflow in SysInternals allows an authorized attacker to achieve local privilege escalation . The vulnerability has a HIGH base severity score of 7.3. No specific affected versions, root cause components, or exploit links are provided in the documents, though an official fix...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...

CVE-2026-93190

A flaw was found in the crosectypec component of the Linux kernel. The crostypecregisterpartnerpdos function does not properly validate the sourcecapcount and sinkcapcount values received from the Embedded Controller EC. An attacker could potentially provide manipulated count values, leading to a...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges bsc1282509. CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution bsc1282449. Patch Instructions: To install this SUSE update...

SUSE-SU-2026:4654-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges bsc1282509. - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution bsc1282449...

SUSE CVE-2026-109264

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service...

SUSE CVE-2026-109267

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a...

hplip: potential memory buffer overflow

A flaw was found in HPLIP. A heap-based overflow in the mdnsreadName function and a stack-based overflow in the mdnsupdateuris function can be triggered when processing specially crafted mDNS responses. This vulnerability allows an attacker on the local network to crash the application, resulting...

HPE NonStop SNMP Trap Multiplexer buffer error vulnerability

The HPE NonStop SNMP Trap Multiplexer T1041L01^BAA and earlier versions contain a buffer error vulnerability stemming from a stack buffer overflow, which may lead to remote code execution...

HPE NonStop TMF Auditread2 buffer error vulnerability

The HPE NonStop TMF Auditread2 T2781L02^ANZ and earlier versions contain a buffer error vulnerability caused by a stack buffer overflow, which may lead to a denial of service...

CVE-2026-97333

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

EUVD-2026-98763

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

CVE-2026-97333 QAPI stack-based buffer overflow

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

CVE-2026-97333 QAPI stack-based buffer overflow

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server...

DEBIAN-CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

UBUNTU-CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...

CVE-2026-109940

FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS11 support has a stack-based buffer overflow in wprintKeyName in WinPR's NCrypt PKCS11 provider. It hex-encodes a key's CKAID, which can be up to 64 bytes, into a fixed 128-byte stack buffer. An attacker supplying a malicious PKCS11 token ...